
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File: hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier: 8exMtO4VkxHW2uG8vBIT2tnd65/lSnd7u/M2UTyGcPU=
Subject key identifier: 84:93:F4:4A:E4:0C:00:05:4A:13:A2:A1:E1:14:00:3E:EA:08:81:1A
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 035F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number: 0346
Signing time: Wed 25 Mar 2026 00:44:31 +0000
Manifest this update: Wed 25 Mar 2026 00:44:31 +0000
Manifest next update: Wed 01 Apr 2026 00:44:31 +0000
Files and hashes: 1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: TYKYEOO2Ipt5sSZdzETyPQGVFdkD227CGWDE2l6Mcko=)
2: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: iAesf40760Ge7OkqHg9mpMk5sp26zXObALVRo0oegXY=)
3: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: 384lM558CG+awOCq+Jp4xJkMm0eBCvPqegdL9GG+nvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863 (0x35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: Mar 25 00:44:31 2026 GMT
Not After : Apr 1 00:44:31 2026 GMT
Subject: CN=69c32fef-2694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:df:31:2e:ab:99:6b:8d:00:c1:00:4c:b6:
b2:35:a9:10:46:ad:af:2e:26:be:59:3f:42:b4:1d:
00:e5:36:8d:9b:46:cb:22:f5:a3:31:ef:b5:1f:67:
75:5d:24:bb:90:a9:86:2a:8c:9b:a7:26:06:41:af:
49:34:65:9b:45:59:6a:bf:72:82:96:4f:07:94:d4:
66:88:f6:1d:9e:a8:77:6d:46:40:00:81:c7:be:bc:
5e:3b:44:52:46:c4:ca:6d:4a:71:72:f0:10:8d:b5:
52:99:06:46:c0:4a:96:f1:ad:2f:61:19:a6:8a:77:
27:6d:86:0c:25:25:73:66:fc:41:2c:eb:98:67:c5:
34:01:8b:f6:fc:c7:7c:bf:f3:33:e7:d8:b9:c7:d0:
ed:c3:eb:2d:5e:9e:34:ed:48:b8:67:ac:3e:36:1b:
af:20:21:0c:fc:6e:70:70:42:8e:8b:00:a1:d8:6f:
40:d1:54:bd:44:78:e5:98:d1:f7:48:e4:35:b6:c6:
78:80:46:d7:f1:7d:4e:27:64:47:9d:dc:1f:59:09:
c1:27:45:43:80:05:64:b3:64:71:81:7e:25:f3:9d:
f0:ec:e6:81:00:00:1a:39:7e:6d:be:90:25:f6:bd:
f8:69:f1:bb:e5:4f:11:55:f9:1a:63:e9:04:a0:4d:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:93:F4:4A:E4:0C:00:05:4A:13:A2:A1:E1:14:00:3E:EA:08:81:1A
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c7:43:46:c9:a7:80:f5:2e:aa:26:d8:55:89:81:89:a6:2d:
df:e3:46:0b:7b:c5:f4:82:ed:1f:a6:ea:34:44:25:fd:d6:19:
cf:aa:5e:f7:3c:ad:64:dc:42:45:5f:ee:98:a5:a3:90:b8:2c:
c6:09:1c:7a:12:73:cf:88:fd:40:02:d5:72:88:0e:55:cc:46:
6f:7c:24:1d:12:b4:db:bb:5b:7b:55:4b:5e:7a:8e:fb:60:1e:
a1:b5:6d:b3:d9:1a:7c:85:76:d3:23:b4:88:99:dc:b6:ca:47:
17:95:fb:6e:48:df:93:72:5d:39:bd:03:b3:f1:d3:15:2d:70:
ee:8b:ba:47:18:80:90:86:71:95:f0:f9:ce:7d:c1:51:ab:01:
5b:ea:7a:1a:d8:6d:be:33:53:7d:36:2f:5e:37:ea:a4:a2:1e:
6d:ef:42:25:20:05:41:d4:63:63:ad:e4:33:c4:2b:11:b8:e1:
4d:74:0a:77:16:26:ce:5c:62:42:ea:e2:b2:0a:7d:ce:4c:e4:
f7:4d:6f:04:e8:7b:c0:cb:ad:9c:a3:73:c4:4d:c1:72:00:a9:
7f:72:25:f5:28:5a:14:5f:59:65:c4:b4:f5:db:b8:4c:aa:77:
88:51:52:79:c7:50:10:bc:57:2a:69:cf:93:d2:fe:7e:5f:b8:
b0:1a:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:46 2026 by rpki-client